Known vulnerabilities in e-STUDIO 1208

Vendor: Toshiba
Software: e-STUDIO 1208
Software CPE: cpe:2.3:h:toshiba:e-studio_1208:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting e-STUDIO 1208 e-STUDIO 1208 is affected by 17 known vulnerabilities: 4 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140746 - Insecure Default Initialization of Resource
CVE-2026-63563
CWE-1188 Medium
No
No
- 03.08.2026 SB2026080323
#VU140745 - Incomplete cleanup
CVE-2026-63545
CWE-459 Low
No
No
- 03.08.2026 SB2026080323
#VU140744 - Direct Request ('Forced Browsing')
CVE-2026-60011
CWE-425 Medium
No
No
- 03.08.2026 SB2026080323
#VU91294 - Out-of-bounds read
CVE-2024-36254
CWE-125 Medium
No
No
- 07.06.2024 SB2024060727
#VU91293 - Out-of-bounds read
CVE-2024-36251
CWE-125 Medium
No
No
- 07.06.2024 SB2024060727
#VU91292 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-36249
CWE-79 Low
No
No
- 07.06.2024 SB2024060727
#VU91289 - Use of Hard-coded Credentials
CVE-2024-36248
CWE-798 High
No
No
- 07.06.2024 SB2024060727
#VU91285 - Use of Hard-coded Credentials
CVE-2024-35244
CWE-798 High
No
No
- 07.06.2024 SB2024060727
#VU91284 - Exposure of sensitive information to an unauthorized actor
CVE-2024-34162
CWE-200 Medium
No
No
- 07.06.2024 SB2024060727
#VU91283 - Improper Access Control
CVE-2024-33616
CWE-284 Medium
No
No
- 07.06.2024 SB2024060727
#VU91282 - Improper Access Control
CVE-2024-33610
CWE-284 High
No
No
- 07.06.2024 SB2024060727
#VU91281 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-33605
CWE-22 Medium
No
No
- 07.06.2024 SB2024060727
#VU91280 - Storing Passwords in a Recoverable Format
CVE-2024-32151
CWE-257 Medium
No
No
- 07.06.2024 SB2024060727
#VU91279 - Unprotected Storage of Credentials
CVE-2024-29978
CWE-256 Medium
No
No
- 07.06.2024 SB2024060727
#VU91278 - Cleartext Storage of Sensitive Information
CVE-2024-29146
CWE-312 Medium
No
No
- 07.06.2024 SB2024060727
#VU91277 - Incorrect Permission Assignment for Critical Resource
CVE-2024-28955
CWE-732 Medium
No
No
- 07.06.2024 SB2024060727
#VU91276 - Stack-based buffer overflow
CVE-2024-28038
CWE-121 High
No
No
- 07.06.2024 SB2024060727